Senior Cyber Risk & Compliance Analyst

Cubic Transportation Systems; Auckland; On-site; NZD 120,000 - 160,000; Full time

Job summary

Cubic Transportation Systems in Auckland is seeking an experienced Information Security professional to provide compliance support across production environments. You will evaluate security controls, prepare scope for IT compliance programs, and coordinate with auditors on PCI-DSS, ISO 27001, and SOC audits.

Lead remediation efforts and ensure adherence to governance practices. You will collaborate with operations, engineering, and security teams to translate audit findings into actionable

Qualifications

• Subject Matter Expert on Security Risk Assessment methodology, policy, strategy and processes.
• Coordinate security audits, including PCI-DSS, ISO 27001, SOC 1 & SOC 2 with internal and external auditors.
• Identify and remediate compliance gaps; develop actionable mitigation plans and communicate with stakeholders.
• Maintain and communicate control documentation in OneTrust GRC system.

Responsibilities

• Lead security risk assessments and audit coordination across IT environments.
• Coordinate with internal/external auditors to complete PCI-DSS, ISO 27001, SOC audits.
• Develop remediation plans and track progress with stakeholders to ensure timely closure.
• Review vendor SOC reports and contracts for impact on controls.
• Liaise with Cubic customers and Security Teams to build positive outcomes.

Skills

Security risk assessment

Audit coordination

Security standards

English communication

Vendor management

OneTrust GRC

Risk governance

Cloud security

Threat understanding

Education

University degree in CS/Engineering

Security certifications (CISA/CRISC/CCSK/CCISSP)

Tools

OneTrust GRC

Azure

AWS

Job description

Cubic Transportation Systems in Auckland is seeking an experienced Information Security professional to provide compliance support across production environments. You will evaluate security controls, prepare scope for IT compliance programs, and coordinate with auditors on PCI-DSS, ISO 27001, and SOC audits.

Lead remediation efforts and ensure adherence to governance practices. You will collaborate with operations, engineering, and security teams to translate audit findings into actionable